[Bug other/90195] GCC: Insecure Tmp Write(s) / Arbitrary Data Injection

2019-04-20 Thread pat at rack911labs dot com
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90195 --- Comment #2 from pat at rack911labs dot com --- (In reply to Andrew Pinski from comment #1) > Use a TMPDIR env if you want to prevent other users from getting access to > files. > > This is a minor security hole really because

[Bug other/90195] New: GCC: Insecure Tmp Write(s) / Arbitrary Data Injection

2019-04-20 Thread pat at rack911labs dot com
Component: other Assignee: unassigned at gcc dot gnu.org Reporter: pat at rack911labs dot com Target Milestone: --- While auditing some third party software, I noticed that when performing a basic compile with gcc that it does a few insecure file operations under /tmp/ that allows